ABSTRACT OF THE DISCLOSURE 

A model for accessing data in an identity-centric manner. An identity may be a 
user, a group of users, or an organization. Instead of data being maintained on an 
application-by-application basis, the data associated with a particular identity is stored by 
one or more data services accessible by many applications. The data is stored in 
accordance with a schema that is recognized by a number of different applications and the 
data service. When a user is to perform an operation on the identity's data, the 
g corresponding application generates a message that has a structure that is recognized by the 

M data service. The message represents a request to perform an operation on the data 

jjj structure corresponding to the identity. The data service receives and interprets the 

^ message. If authorized, the data service then performs the operation. 
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